Solved

How to request a 2048-bit trusted certificate in Oracle Wallet Manager 3.0?

Posted on 2014-03-21
5
547 Views
Last Modified: 2014-03-28
We are in the midst of an upgrade from Oracle IAS 10g (9.0.2) to 10.1.2 and then on to Fusion Middleware 11g, to be completed this summer. However, our customer is requiring us to support Discoverer Plus 9.0.2 on Windows 7 before Windows XP is desupported on April 8. The solution seems to be to change from JInitiator to use the Sun JRE, and this works well - except that the application is not trusted and JRE 7U51 throws a nasty warning on every execution.

I'd like to generate a trusted certificate for the server, but the Oracle Wallet Manager in this version will only generate a CSR up to 1024 bit strength, and our CA, Entrust, won't accept a request for anything less than 2048 bit strength. And I'm not really wanting to become my own CA using Oracle Certificate Authority for this simple short-term need, unless there is a very simple setup and procedure for what I need to do. Time is short, and I need to keep it simple.

Can anyone point me to a way to create the necessary cert request? Or is there a better solution until I get the next version running?

Thanks,

Sam Trexler
0
Comment
Question by:SamTrexler
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 30

Expert Comment

by:pgm554
ID: 39946813
What's the network OS?

You can generate a 2048 using the SSL built into IIS 7.
0
 

Author Comment

by:SamTrexler
ID: 39950917
The OS is Windows 2000, which we are also moving away from quickly - but that won't be completed in time. This box does not have IIS installed, unfortunately, because it uses the Oracle HTTP server (based on Apache).

Could we simply install a small, lightweight tool to generate the cert? What would be a good tool for this?

Thanks.
0
 
LVL 30

Accepted Solution

by:
pgm554 earned 500 total points
ID: 39951615
If that version of Apache is too old ,it may not support a 2048 bit version of SSL.

But you can try:

https://www.sslshopper.com/article-how-to-create-and-install-an-apache-self-signed-certificate.html
0
 

Author Comment

by:SamTrexler
ID: 39951831
Thanks, I'll take a look at that.
0
 
LVL 30

Expert Comment

by:pgm554
ID: 39951936
Here's another that may work.

http://www.geotrust.com/support/generate-csr/
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We've all had that page pop up telling us there is a problem with the certificate and some of us continue on anyways and others run away to a safer competing site.  But what to do when you get the error - is it your problem or theirs?  What can you …
Convert websphere application server default chained Certificates from 1024 to 2048 keysize or higher size and also you can change signatureAlgorithm . Please make sure Websphere Application Server fixpack 7.0.0.23 or Above. The following steps a…
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question